Lucene search
HistoryApr 01, 2014 - 6:28 a.m.
CVE-2014-0634
emc
vplex
geosynchrony
httponly
set-cookie
remote attackers
information security
6.4 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.4%
EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Related
seebug
seebug
EMC VPLEX GeoSynchrony信息泄露漏洞
2014-04-02 00:00:00
prion
prion
Code injection
2014-04-01 06:28:00
securityvulns
securityvulns
EMC VPLEX multiple security vulnerabilities
2014-03-31 00:00:00
ESA-2014-016: EMC VPLEX Multiple Vulnerabilities
2014-03-31 00:00:00
6.4 Medium
AI Score
Confidence
Low
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
60.4%
Related for CVE-2014-0634